New QuestionClients are failing EAP authentication. A debug shows that an EAPOL start is sent and the clients are then de-authenticated. Which two issues can cause this problem? (Choose two.)

A. The WLC certificate has changed.B. The WLAN is not configured for the correct EAP supplicant type.C. The shared secret of the WLC and RADIUS server do not match.D. The WLC has not been added to the RADIUS server as a client.E. The clients are configured for machine authentication, but the RADIUS server is configured for user authentication.

Answer: CD

New QuestionAn engineer has configured an anchor controller in the DMZ for guest traffic, but the traffic is failing at the firewall. Which two ports must be opened on the firewall? (Choose two.)

New QuestionAn engineer configures the wireless LAN controller to perform 802.1x user authentication. Which option must be enabled to ensure that client devices can connect to the wireless, even when WLC cannot communicate with the RADIUS?

New QuestionA client wants to put wireless users on different VLANs while using one SSID. Which two methods accomplish this goal? (Choose two.)

A. Use ACS as the RADIUS server.B. Configure aaa override on Cisco WLC WLAN.C. Configure similar SSIDs with different VLANs.D. Configure the same WLAN on ID 1 and 17.E. Configure the Cisco WLC internal RADIUS server.

Answer: AB

New QuestionAn engineer must segment traffic into separate WLANs. Which three factors should be used to determine traffic segmentation? (Choose three.)

New QuestionAn engineer has enabled Cisco Centralized Key Management on a WLAN with local and FlexConnect mode APs. The engineer notices that Cisco CKM is not working for the FlexConnect APs when looking at roaming, but is working for local mode APs. Which change is needed on the controller for Cisco CKM to work for the FlexConnect APs?

New QuestionA network administrator has had issues with clients giving out their username and password to other employees to authenticate to the internal wireless SSID. Which 802.1x authentication stops users from being able to share credentials?

A. EAP-TLSB. EAP-MSCHAPv2C. LEAPD. EAP-FAST

Answer: A

New QuestionA sporting arena has a new wireless network and finds that clients are not connecting to their nearest access point. Which setting can be enabled to minimize this behavior and reduce the AP view of channel utilization?

A. Use an RF profile with an RX-SOP threshold.B. Enable Band SelectC. Enable Client BalancingD. Turn on CleanAir

Answer: A

New QuestionWhich option is a calibration of a Cisco MSE deployment limited to when that deployment is using the linear point collection method?

New QuestionAn engineer has deployed a WLAN in a high-density auditorium and expects the number of clients to grow.Which WLC configuration can be used to increase the IP space without any service disruptions?

A. dynamic interfaceB. interface groupC. AP groupD. RF group

Answer: B

New QuestionA security engineer wants all guest users to be terminated on the DMZ of their firewall. Which two configurations must be implemented to fulfill this new requirement? (Choose two.)

A. TCP port 16666 and 16113 in an ACL on the controllerB. UDP ports 16666 and IP protocol 97 on the firewallC. a mobility group with a controller in an isolated network on the firewallD. an RF group with a controller in an isolated network on the firewallE. UDP ports 1812 and 1645 in an ACL on the controller

Answer: BC

New QuestionWhich two access categories could use TXOP value higher than 0, as per 802.11e standard? (Choose two.)

New QuestionClients on access points within an AP group are not receiving multicast traffic after roaming to another AP within the AP group. Which configuration must be done to maintain multicast connectivity?

A. Enable an ACL on the router that serves the VLAN or subnet.B. Enable NAC out-of-band support.C. Enable a unique NAS-ID for the AP group.D. Enable IGMP snooping.